From ec037e422b074b6f46b8b81371a6bb20440ff68d Mon Sep 17 00:00:00 2001 From: Jerome Petazzoni Date: Sat, 8 Sep 2018 07:19:58 -0500 Subject: [PATCH] Clarify --- slides/k8s/netpol.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/slides/k8s/netpol.md b/slides/k8s/netpol.md index e2df6908..dcd76d96 100644 --- a/slides/k8s/netpol.md +++ b/slides/k8s/netpol.md @@ -75,7 +75,8 @@ class: extra-details
the restriction cannot be overridden by a network policy selecting another pod -- This prevents an entity with access to namespace A (but no access to namespace B) +- This prevents an entity managing network policies in namespace A + (but without permission to do so in namespace B) from adding network policies giving them access to namespace B ---